Draft for review. Have a lawyer review this and fill in the bracketed parts before you sell to customers.

Privacy Policy

Last updated: [DATE]

[YOUR COMPANY NAME] runs Puncharoo for small businesses. This explains what we collect and why.

Business owners

We collect your email, password (stored scrambled, never readable), store name and settings. Payments are handled by Stripe; we never see or store card numbers.

Shoppers who join a store's rewards program

When you check in at a store, we store your phone number, first name, points, visit history and, if you give it, your birthday. If you give an email address, we store it and whether you agreed to receive the store's offer emails, with the wording and time. This information belongs to the store you joined and is only visible to that store. We do not sell it, and we do not share it with other stores.

How we use it

• To run the rewards program for the store.
• To send offer emails only if you agreed, and only on behalf of that store. Every email has an unsubscribe link.
• To keep the service secure and working.

Who we share it with

Service providers that help us run the service: Supabase (database hosting), Stripe (payments), and our email delivery provider (sending emails). They may only use the data to provide their service to us.

Keeping and deleting data

Stores can delete a shopper's information at any time from their dashboard. To ask for your information to be deleted, contact the store you joined or email us at [EMAIL].

Contact

[YOUR COMPANY NAME], [MAILING ADDRESS]